iDIN and online casinos: is this verification method legally required?

No, iDIN is not legally required for players at online casinos in the Netherlands. The Remote Gambling Act (Wet KOA) does require strict identity and age verification, but leaves the technical implementation to the provider. License holders of the Kansspelautoriteit almost standardly choose iDIN due to its speed, safety, and direct link with the CRUKS register. Players can alternatively verify themselves via document upload, but this process is slower and less user-friendly. Without any form of verification, legal play is impossible.

The legal frameworks around identity verification

The confusion about the obligation of iDIN often arises from an unclear distinction between the legal requirement and its technical implementation. The Remote Gambling Act does not prescribe that players must specifically use iDIN, but it does place a heavy responsibility on the shoulders of the provider. A legal online casino with a Dutch license must guarantee that every player is at least 18 years old and is not registered in the Central Register for Exclusion of Games of Chance (CRUKS).

Verification obligation versus technical choice

The Kansspelautoriteit views iDIN as the most efficient and secure method to perform these checks in real-time, but it is not a law in itself. iDIN is a service developed by Betaalvereniging Nederland, which casinos voluntarily adopt because it automates the verification process. This automation is important in the fight against money laundering and protecting minors.

Although iDIN is clearly preferred within the industry, it is not the only accepted option. The regulator requires the data to be reliable, but in principle leaves the method to the operator, as long as the outcome meets the strict KYC (Know Your Customer) requirements. iDIN wins here because it links directly to bank details, eliminating errors in manual entry or forged documents. Players who cannot or do not want to use iDIN can still verify themselves by uploading an ID, although this process takes significantly longer.

The role of CRUKS and age restrictions

The primary task of the Kansspelautoriteit is to combat gambling addiction and ensure market integrity. A core instrument in this is CRUKS. Every legal online casino is required to screen players against this register before access is granted. iDIN plays a vital role in this: because the verification goes through the bank, the casino can check in real-time whether a player is in CRUKS.

If a player is registered in CRUKS, access is immediately blocked. This is a strict requirement of the Kansspelautoriteit to make self-exclusion effective. Without a system like iDIN that enables direct connections, a casino would rely on slower, manual checks that increase the risk of human error. For players, this means that iDIN is not just a login method, but an essential link in Dutch addiction prevention.

In addition to access to the casino itself, verification also determines which promotions a player can receive. The law states that you must be at least 18 years old to gamble. However, a stricter requirement applies to claiming bonuses: you must be at least 24 years old. iDIN not only verifies that you are 18+, but also provides the exact date of birth needed to apply this bonus restriction. An online casino uses the data from the iDIN check to automatically filter: players between 18 and 24 years old are allowed to play, but are not offered a welcome bonus or free spins. This automatic filtering prevents casinos from accidentally issuing bonuses to younger players, which would violate Dutch regulations regarding advertising and addiction prevention.

The technical process of iDIN verification

Although the law does not prescribe the technology, iDIN has become the de facto standard in the Dutch market. This identification method, developed by Betaalvereniging Nederland, combines age verification and CRUKS checks in one step. The system is derived from iDEAL and works through your own banking environment, meaning verification is completed within minutes without you having to upload documents.

Step-by-step registration

How does iDIN work in practice during online casino registration? The process is very similar to an iDEAL payment, but no money is transferred. While creating an account, you choose iDIN as the verification method. Next, you select your bank from the list. You will be redirected to the trusted login environment of your bank, where you log in using your own method, such as a fingerprint or PIN code in the mobile app.

The bank shows which data is being shared: usually your name, date of birth, and IBAN. After your consent, this data is sent directly and encrypted to the casino. The casino automatically checks whether you are 18+ and not registered in CRUKS. Is everything in order? Then your account is immediately verified and you can play. This eliminates the waiting time for manual document checks, which usually saves days compared to traditional methods.

Security and data protection

Is iDIN secure for online casinos because it runs through the bank? Yes, the security lies in the infrastructure. Major institutions such as ING Bank, Rabobank, and ABN AMRO use their own secure networks for data exchange. You do not share copies of your passport with an unknown server, which reduces the risk of identity theft.

Importantly, iDIN only shares identity data, not your bank balance or transaction history. This distinction is important for privacy-conscious players. Processing complies with strict requirements, including the GDPR, because the bank acts as a trusted intermediary. From a compliance perspective, this gives casinos the assurance that the player actually exists, without having to store sensitive financial data. Many players wonder: does the casino see my bank balance via iDIN? The answer is no. iDIN is derived from iDEAL but serves purely for verification, not for payments. During the process, you log into your own banking environment and see exactly which data is shared: typically your name, address, date of birth, and whether you are of legal age. Financial details such as your balance or transaction history remain strictly private and are never passed on to the casino. The Dutch Banking Association (Nederlandse Vereniging van Banken) ensures that this separation between identity data and financial data is technically and legally watertight.

Available banks and exceptions

Currently, almost all major Dutch banks support the service, including ING Bank, Rabobank, ABN AMRO, and SNS Bank. However, there is an important exception: Triodos Bank has discontinued support for iDIN. Therefore, Triodos customers cannot confirm their identity via this method. Customers of some smaller banks may also encounter limitations.

Before registering, check if your bank still participates in the network of Betaalvereniging Nederland. For players using banks that no longer participate, iDIN is not an option. They will have to turn to casinos that accept alternative verification methods, such as uploading an ID or verification via other payment providers.

Alternative verification methods and their disadvantages

When iDIN is not available, legitimate alternatives remain for players at providers with a Dutch license. The law requires identification, but not specifically via iDIN. Players can verify themselves by uploading an ID, although this process is slower than the direct bank link. These alternative methods are legal with providers holding a Dutch license, provided they meet strict Know Your Customer (KYC) standards for age and identity verification.

Verification via document upload

At an online casino with a Dutch license, verification via iDIN is the standard, but certainly not the only option. If you cannot use iDIN, for example due to banking restrictions, legal providers such as Holland Casino or BetCity offer alternative routes. You will then be asked to upload a scan of your identity document, such as a passport or ID card.

Many modern platforms use specialized services for this, such as Veriff. This technology scans and validates documents automatically, which is more secure than emailing, but still more manual than iDIN. Although Veriff speeds up the process, it remains a step you have to perform yourself instead of an automatic link to your banking environment. The goal remains identical: proving you are who you say you are and that the payment method is in your name.

The impact of waiting times on gaming enjoyment

The biggest disadvantage of verification without iDIN is the duration. While iDIN confirms your age and identity within minutes, a manual check via Know Your Customer (KYC) protocols can take from hours up to two days. During this period, you often cannot play immediately or withdraw money.

This process is necessary to combat money laundering and comply with the Remote Gambling Act. Players must have patience; after all, the casino must check whether the provided ID is valid and whether the photo matches the user. This delay is a conscious choice by the regulator to guarantee careful checks, at the expense of immediate gaming enjoyment.

Risks of foreign providers

Some players look to foreign providers because they do not require iDIN. Casinos with a license from Curacao or Malta often work with simpler verification methods, or sometimes even without strict checks upon registration.

Please note: these online casinos do not fall under the Dutch Gaming Authority (Kansspelautoriteit). They are not connected to CRUKS and do not offer Dutch consumer protection. Although a license from Curacao or Malta offers some regulation, in the event of conflicts you have no recourse with the Dutch legislator. Furthermore, these sites are allowed to offer cashback bonuses, which is subject to strict rules in the Netherlands. Choose consciously for safety over convenience.

Player protection and support

In addition to technical verification, player protection is a cornerstone of Dutch legislation. iDIN and CRUKS are tools to prevent problematic gambling behavior, but they are not the only layer of protection. Legal casinos are required to inform players about responsible gaming and provide access to resources.

Loket Kansspel and self-exclusion

For players who notice that their gambling is getting out of hand, Loket Kansspel is the central point for information and help. This independent organization offers free advice and support. Via CRUKS, players can exclude themselves from all legal providers in the Netherlands. This exclusion is irrevocable for a minimum period of six months and is checked directly via systems like iDIN during login.

The use of iDIN ensures that this self-exclusion is effective. Without this direct link, a player could easily register at another casino, which undermines the protection. The strict verification requirements raise the threshold for impulsive gambling behavior and offer those seeking help the space to distance themselves.

GDPR compliance and data storage

How does iDIN protect my privacy according to the GDPR? Online casinos using iDIN must comply with the General Data Protection Regulation (GDPR). The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) supervises the correct processing of these personal data. A casino is only allowed to store your data for the purpose that was communicated beforehand, such as age verification and KYC (Know Your Customer). The Data Protection Authority states that organizations must be transparent about data storage; with iDIN, you as a player know exactly what is shared because you activate and confirm it yourself in your banking app. Banks are never allowed to pass on data for commercial purposes without explicit consent, which offers extra protection against unwanted marketing.

Prevention of money laundering and fraud

Verification is important to combat money laundering. The Prevention of Money Laundering and Financing of Terrorism Act (Wwft) obliges casinos to verify the identity of their customers. By using iDIN, operators can immediately and reliably establish who is playing, which meets the KYC obligations. The Prevention of Money Laundering and Financing of Terrorism Act requires transactions to come from legal sources. A verified identity via iDIN is the first step in this compliance process. This system helps casinos map risks and prevent illegal activities, without the player having to submit complicated documents.

About this article - editorial guidelines

Author: Sarah Weber - Casino tester & bonus analyst

Fact-checked by: Dr. Markus Hoffmann - Senior iGaming Compliance

Analysis last updated: 2026-07-15.

This article about "is iDIN required at online casinos" was written by Sarah Weber and fact-checked by Dr. Markus Hoffmann. Both regularly update the content for changes in regulations, licenses, and bonus terms. All references to licenses, regulators, and legislation link to public sources (the local gambling regulator, the applicable local gambling law).

About the author

8+ years of experience reviewing casinos, 200+ personally tested platforms in the EU and worldwide. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: wagering requirements, withdrawal processes, customer service evaluation.

About the reviewer

12+ years of experience in the iGaming industry, including 5 years as a compliance advisor for licensed operators in multiple regulated markets. PhD in economic mathematics. Focus areas: bonus mathematics, wagering analysis, and player protection systems.

Responsible gambling

Gambling can be addictive. If you feel like you are losing control of your play, contact the relevant helpline for gambling problems or use the national self-exclusion register (the relevant national self-exclusion register). Set personal limits for deposits and losses BEFORE you play with real money. Operators offer pause and cool-down tools to keep play sustainable.

Legal notice

The information in this article is provided solely for editorial and comparison purposes and does not constitute legal advice. Players are responsible for compliance with local regulations.